docs: rulings 2026-10-04 ~10:17 (decisions 78-80)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CONTEXT.md

@@ -16,6 +16,11 @@
 > and holds nothing of its own; this file does hold its own content, namely the standing rulings below.
 
 
+> **Rulings 2026-10-04 (~10:17) — recorded before the work (guest fast lane build).** `09` §3 decisions **78** (R-726
+> option A: a returning household's box sets the old off-site copy aside on night one), **79** (`snapshot.debian.org`
+> fallback for a replaced approved version — option A; the reviewer had picked B) and **80** (next build: the guest
+> fast lane, R-837 measured first, R-838 in the same session).
+
 > **2026-10-04 (day) — off-site closed; OS-update spike done.** Hub v0.129.0 (R-833: operator raises ONE window's cap,
 > `POST /offsite/window-grant/<id>` `max_remove=<n>`, 1..500, consumed once, window row records its cap). Agent v0.139.0
 > (R-834: DR bring-up refuses beside a live original; restore-test measured safe), `scripts/felhom-restore-beside.sh`

documentation/architecture/09-update-architecture.md

@@ -753,6 +753,18 @@ its length, and both fixes cost something the household would notice — operato
 77. **`architecture/11-os-updates.md` is added as the reviewer wrote it, NOT RATIFIED**, committed unchanged first and
     then corrected by the spike's measurements, each correction named. *Operator ruling 2026-10-04 (morning).*
 
+### 2026-10-04 (late morning) — three operator rulings (recorded before the work)
+
+78. **A returning household's first night (R-726): option A.** On its first night a claimed box whose off-site repository
+    is orphaned sets the old copy aside by itself and starts a new one, as an unclaimed box already does. Nothing is
+    deleted; the old copy can be put back. **Rejected:** asking on the recovery-code evening (new screens; a skipped
+    question leaves the gap). *Operator ruling 2026-10-04 ~10:17.*
+79. **An approved Debian version that Debian has already replaced: option A** (`11` §5.3, C2). The box fetches the exact
+    version from `snapshot.debian.org` at the approval timestamp (signed by Debian). **Rejected:** waiting for the next
+    approval. *The reviewer had picked B, for simplicity; the operator chose A.* *Operator ruling 2026-10-04 ~10:17.*
+80. **Next build: the guest fast lane** (`11` §8 step 2), with R-837 (the snapshot undo) measured first and R-838 (the
+    infrastructure images) in the same session. *Operator ruling 2026-10-04 ~10:17.*
+
 ### 2026-09-30 (day) — operator notes, recorded before the work
 
 - **The day brief runs by day.** Every backup and automatic-update test is started by hand — the night chain's debug